STIGQter: STIG Summary: F5 BIG-IP Device Management 11.x Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Oct 2020:

The BIG-IP appliance must be configured to create backups of information system documentation, including security-related documentation, when changes occur or weekly, whichever is sooner.

DISA Rule

SV-217422r557520_rule

Vulnerability Number

V-217422

Group Title

SRG-APP-000516-NDM-000341

Rule Version

F5BI-DM-000279

Severity

CAT II

CCI(s)

CCI-000539 - The organization conducts backups of information system documentation, including security-related documentation, per an organization-defined frequency that is consistent with recovery time and recovery point objectives.
CCI-000366 - The organization implements the security configuration settings.

Weight

Fix Recommendation

Configure the BIG-IP appliance to create backups of information system documentation, including security-related documentation, when changes occur.

Check Contents

Verify the BIG-IP appliance is configured to off-load logs to a remote log server when changes occur.

Navigate to the BIG-IP System manager >> System >> Logs >> Configuration >> Remote Logging.

Verify a log destination is configured to allow for backups of information system documentation when changes occur.

If the BIG-IP appliance does not backup the information system documentation, including security-related documentation, when changes occur, this is a finding.

The BIG-IP appliance must be configured to create backups of information system documentation, including security-related documentation, when changes occur or weekly, whichever is sooner.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key

Comments